Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa
File:                     d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa (raw, json)
Hash identifier:          Je7rQKMkQ+l1ZvGdUvHYXuoK0q8cONz+hJmbXJxFQfU=
Subject key identifier:   96:42:B2:47:8D:BE:EF:BC:BD:AF:89:7B:98:06:A5:FF:6A:DF:73:B5
Certificate issuer:       /CN=10c21a82-48fa-4568-908e-8e488e55c411
Certificate serial:       010D0C9F4328584D7F9A7B9DE3BF1B0B33CF8F80
Authority key identifier: 93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     398717
IP address blocks:        45.59.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:7b:9d:e3:bf:1b:0b:33:cf:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c21a82-48fa-4568-908e-8e488e55c411
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=6848af62-a20e-435d-9ac7-c5c231303524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ea:14:d0:64:7a:e7:c6:a1:aa:8a:99:bd:84:
                    af:91:b1:5f:b4:40:8d:21:c7:c3:d9:21:62:a6:88:
                    6a:ed:a7:89:e2:95:94:45:23:37:a1:e8:90:8d:13:
                    29:f8:cd:9f:7c:f6:ba:ab:48:0f:f6:fe:3e:32:80:
                    a3:dc:41:13:2b:e7:af:89:e7:d4:d8:2d:a4:55:34:
                    70:1c:d3:b0:05:11:6f:51:77:ae:c8:97:7b:a8:1f:
                    99:31:4e:48:cc:34:92:e4:2d:5c:41:17:ef:65:dc:
                    79:4b:23:63:9a:3c:f7:63:ea:d8:42:04:ff:d3:11:
                    58:46:bd:99:54:34:23:42:0f:f8:b1:fb:98:33:e9:
                    22:5c:ce:6f:da:3b:8d:a6:da:fc:cf:cb:12:54:84:
                    33:67:7a:55:88:12:6f:d4:a7:70:45:b1:fc:fe:c5:
                    88:23:ba:68:49:9f:a5:09:e5:a7:d6:79:c5:51:15:
                    23:3c:9f:36:97:c1:b9:f2:39:d1:ee:f0:9f:6e:ee:
                    2b:a2:04:db:a0:20:63:cd:f9:b0:d0:a5:98:f4:39:
                    13:60:6d:88:88:68:6e:fb:63:74:fc:cf:18:78:3e:
                    8f:95:2e:ec:18:b1:3f:af:f4:05:81:ed:e1:e5:7b:
                    02:0e:fc:0b:9c:63:3a:f2:a2:0b:db:24:07:61:c0:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:42:B2:47:8D:BE:EF:BC:BD:AF:89:7B:98:06:A5:FF:6A:DF:73:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl

            X509v3 Authority Key Identifier:
                keyid:93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:3c:db:36:5b:6f:04:45:a4:13:42:3b:15:72:0c:92:6a:
         dd:82:83:0c:75:96:14:eb:fb:86:fb:10:c2:36:e5:6b:d7:47:
         cc:6b:6c:3b:81:35:e0:41:8e:67:6c:ac:80:3a:e1:ba:9f:30:
         76:a4:39:8a:d0:55:da:aa:f4:6f:1a:08:e6:61:4d:e3:4d:c9:
         49:26:0a:4a:15:26:97:b0:68:d9:55:6a:3a:69:28:71:d6:04:
         86:f0:2d:9c:4c:35:78:52:d2:bf:36:1d:c4:86:71:f0:58:5a:
         8a:05:48:29:99:48:53:01:b8:9b:b6:6a:40:70:1a:8e:a9:e0:
         33:f8:bd:0a:4c:58:22:da:ff:4a:58:91:22:00:d8:05:c7:7d:
         b7:fd:8a:c6:8a:05:10:91:7a:c7:6f:25:3e:4c:ac:7c:90:01:
         e3:bb:82:af:a5:f5:3e:85:a5:ba:9e:f8:29:d0:ae:3a:89:5e:
         28:1c:f2:b0:29:e8:98:88:42:59:3e:fe:32:46:c0:1d:aa:e3:
         ab:89:70:c0:c3:35:54:70:94:48:89:7b:25:34:59:33:97:9d:
         88:1e:6d:e4:d8:2f:20:da:a1:45:fd:8c:d2:be:a0:f9:61:6c:
         96:9b:a7:bb:5b:76:88:24:92:3d:16:53:24:17:c0:ec:eb:0d:
         30:02:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:38:13 2026 by rpki-client